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Abstract. We consider the problem of maximizing the probability of 
hitting a strategically chosen hidden virtual network by placing a wiretap 
on a single link of a communication network. This can be seen as a two- 
player win-lose (zero-sum) game that we call the wiretap game. The value 
of this game is the greatest probability that the wiretapper can secure for 
hitting the virtual network. The value is shown to equal the reciprocal 
of the strength of the underlying graph. 

We efficiently compute a unique partition of the edges of the graph, called 
the prime-partition, and find the set of pure strategies of the hider that 
are best responses against every maxmin strategy of the wiretapper. 
Using these special pure strategies of the hider, which we call omni- 
connected-spanning-subgraphs, we define a partial order on the elements 
of the prime-partition. From the partial order, we obtain a linear number 
of simple two- variable inequalities that define the maxmin-polytope, and 
a characterization of its extreme points. 

Our definition of the partial order allows us to find all equilibrium strate- 
gies of the wiretapper that minimize the number of pure best responses 
of the hider. Among these strategies, we efficiently compute the unique 
strategy that maximizes the least punishment that the hider incurs for 
playing a pure strategy that is not a best response. Finally, we show 
that this unique strategy is the nucleolus of the recently studied simple 
cooperative spanning connectivity game. 

Keywords: cooperative game, network connectivity, network security, nucleolus, 
wiretapping, zero-sum game. 

1 Introduction 

Communication networks consist of two major layers, large static physical net- 
works, and virtual networks built on top of them. The physical infrastructure 
comprises optical fibres, circuits, and routers etc., and rarely changes. A vir- 
tual network specifies how to route traffic between nodes, is software-driven and 
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hence flexible. Modern physical networks are highly-connected and ofler many 
possibilities for constructing virtual networks. Security is an important consider- 
ation for choosing a virtual network. One aspect of network security is resilience 
to wiretapping, which is the problem we study here from a game-theoretic per- 
spective. 

Wc consider the problem of maximizing the probability of hitting a strate- 
gically chosen hidden virtual network by placing a wiretap on a single link of a 
communication network, represented by an undirected, unweighted graph. This 
can be seen as a two-player win-lose (zero-sum) game that we call the wiretap 
game. A pure strategy of the wiretapper is an edge to tap, and of his opponent, 
the hider, a choice of virtual network, a connected spanning subgraph. The 'wire- 
tapper wins, with payoff one, when he picks an edge in the network chosen by 
the hider, and loses, with payoff zero, otherwise. Thus, the value of this game 
is the greatest probability that the wiretapper can secure for hitting the hid- 
den network. He does this by playing a maxmin strategy, which is a probability 
distribution on the edges. The value also equals the smallest probability that 
the hider can secure, which she does by playing a minmax strategy, which is a 
probability distribution on connected spanning subgraphs. 



Our results. The value of the wiretap game is shown to equal the reciprocal 

of the strength of the underlying graph, a concept introduced by Gusficld [14]. 
We eflaciently compute a unique partition of the edges of the graph, called the 
prime-partition. We find the set of pure strategies of the hider that are best 
responses against every maxmin strategy of the wiretapper. Using these special 
pure strategies of the hider, which we call omni- connected-spanning- subgraphs, 
we define a partial order on the elements of the prime-partition. Our definition 
in terms of omni-conneeted-spanning-subgraphs is central to proving our results. 

From the partial order, we obtain a linear number of simple two-variable 
inequalities that define the maxmin-polytope, and a characterization of its ex- 
treme points. In contrast, the natural description of the maxmin-polytope is 
as the solutions to a linear program with exponentially many constraints. Our 
definition of the partial order allows us to find all equilibrium strategies of the 
wiretapper that minimize the number of pure best responses of the hider. Among 
these strategies, we efficiently compute the unique strategy that maximizes the 
least punishment that the hider incurs for playing a pure strategy that is not a 
best response. 

Finally, we show that our analysis of the wiretap game provides a polynomial- 
time algorithm for computing the nucleolus of the spanning connectivity game, a 
simple cooperative game [6]. In this game, the players are the edges of the graph 
and a coalition, which is a subset of edges, has value one if it is a connected 
spanning subgraph, and zero otherwise. The characterization of the maxmin 
strategies of the wiretap game carries over to the least-core polytope of the 
spanning connectivity game, and the nucleolus of this game is the special maxmin 
strategy we compute for the wiretap game. 
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Related work. Wiretapping, as an important aspect of network security, has 
received recent attention in different settings, see e.g. [11] and [15]. 

The strength of an unweighted graph, which has a central role in our work, 
is also called the edge-toughness, and relates to the classical work of Nash- 
Williams [20] and Tutte [27]. Cunningham [5] generalized the concept of strength 
to edge-weighted graphs and proposed a strongly polynomial-time algorithm to 
compute it. Computing the strength of a graph is a special type of ratio optimiza- 
tion in the field of submodular function minimization [12]. Cunningham used the 
strength of a graph to address two different one-player optimization problems: 
the optimal attack and reinforcement of a network. The prime-partition we use is 
a truncated version of the principal-partition, first introduced by Narayanan [19] 
and Tomizawa [25] . The principal-partition was used in an extension of Cunning- 
ham's work to an online setting [21]. Our work complements that of Cunningham 
and its successors by analyzing a new two-player game. 

The nucleolus of the spanning connectivity game can be seen as a special 
maxmin strategy in the wiretap game. The connection between the nucleolus of 
a cooperative game and equilibrium strategies in a zero-sum game has been in- 
vestigated before in a general context [22]. However, in many cases the nucleolus 
is hard to compute. The computational complexity of computing the nucleolus 
has attracted much attention [17], with both negative results [8, 10, 7], and posi- 
tive results [13, 9, 16, 24]. Our positive results for the spanning connectivity game 
are in contrast to the negative results presented in [1] , where it is shown that the 
problems of computing the Shaplcy values and Banzhaf values are #P-conipIcte 
for the spanning connectivity game. Those results arc a strengthening of the 
hardness results for the more general, min-base games, introduced in [18], and 
the positive results here thus apply to a special case of those games. 

2 The wiretap game 

The strategic form of the wiretap game is defined implicitly by the graph G = 
(V,E). The pure strategies of the wiretapper are the edges E and the pure 
strategies of the hidcr are the set of connected spanning subgraphs S. An clement 
of iS is a set of edges, with a typical clement denoted by S. The wiretapper 
receives payoff one if the edge he chooses is part of the spanning subgraph chosen 
by the hidcr, and receives payoff zero otherwise. Thus, the value of the game is 
the probability that the wiretapper can secure for wiretapping the connected 
spanning subgraph chosen by the hider. 

Let A{A) be the set of mixed strategies (probability distributions) on a finite 
set A. By the well-known minmax theorem for finite zero-sum games, the wiretap 
game r{G) has a unique value, defined by 



The equilibrium or maxmin strategies of the wiretapper are the solutions {x e 
^(-^) I Hees > val{r) for all S £ S} to the following linear program, which 




(1) 
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has the optimal value val{r). 

max z 

s-t- Eees xe>z for all S € S , (2) 
X e A{E) . 

Playing any maxmin strategy guarantees the wiretapper a probability of suc- 
cessful wiretapping of at least val{r). The equilibrium or minmax strategies of 
the hider are {y e ^(<S) | J2{seS:eeS}ys ^ val{r) for all e € E}. Playing 
any minmax strategy guarantees the hider to suffer a probability of successful 
wiretapping of no more than val{r). The following simple observation shows 
the importance of minimum connected spanning graphs in the analysis of the 
wiretap game. For a mixed strategy x G A{E) and pure strategy 5 e 5, the 
resulting probability of a successful wiretap is X^eeS'^'^' denote by the 
edge- weighted graph comprising the graph G with edge weights x{e) for all e € E. 
Let w*{x) be the weight of a minimum connected spanning graph of G^. 

Fact 1 The set of pure best responses of the hider against the mixed strategy 
X G A{E) is 

{5g5 I = . 

We could define the wiretap game by only allowing the hider to pick spanning 

trees, however, our definition with connected spanning subgraphs allows a clean 
connection to the spanning connectivity game. 

3 Overview of results 

In this section, we present our results. We start with the basic notations and 
definitions. Prom here on we fix a connected graph G = (V, E). Unless mentioned 
explicitly otherwise, any implicit reference to a graph is to G and a is an edge- 
distribution, which is a probability distribution on the edges E. For ease, we often 
refer to the weighted graph simply by a, where this usage is unambiguous. 
For a subgraph H of G, we denote by a{H) the sum X]ee£;(ff) '^i^)^ where E{H) 
is the edge set of H. We refer to equilibrium strategies of the wiretapper as 
maxmin-edge-distributions. 

Definition 1. For every edge- distribution a, we denote its distinct weights by 
x'l > ... > x^ > and define £{a) = {Ef,...,E^) such that Ef = {e G 
E I a(e) = a;"} for i = 1, . . . ,m. 

Our initial goal is to characterize those partitions £{a) that can arise from 
maxmin-edge-distributions a. We start with the following simple setting. Assume 
that the wiretapper is restricted to choosing a strategy a such that \S{a)\ = 2, 
and x^ = 0. Thus, the wiretapper's only freedom is the choice of the set E". 
What is his best possible choice? By Fact 1, a best response against a is a 
minimum connected spanning subgraph H of a. So the wiretapper should choose 
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E" so as to maximize a{H). How can such an E" be found? To answer, we relate 
the weight of a minimum connected spanning subgraph iJ of a to E^. 

To determine a{H), we may assume about H that for every connected com- 
ponent C of {V, E \ E'^) wc have E{H) n E{C) = E{C), since a(e) = for every 
e € E(C). We can also assume that \Ef n E{H)\ is the number of connected 
components in {y,E \ Ef) minus 1, since this is the minimum number of edges 
in E{H) that a connected spanning subgraph may have. To formalize this we 
use the following notation. 

Definition 2. Let E' C E. We set Cg{E'), to he the number of connected 
components in the graph G \ E' , where G\E' is a shorthand for (V, E \ E'). If 

E' — $ we just write Cg ■ 

Using the above notation, a connected spanning subgraph ff is a minimum 
connected spanning subgraph oi a \i \H n E^\ = Cg{E") - Cg = Cg{E") - 1. 
Now we can compute a{H). By definition, = and X2 =Q and therefore 

,„. Cg{E'^)-Cg 
"^^^ \Ef\ ■ 

Wc call this ratio that determines a.{H) the cut-rate of Ef . Note that it uniquely 
determines the weight of a minimum connected spanning subgraph of a. 

Definition 3. Let E' C E. The cut-rate of E' in G is denoted by crG{E') and 
defined as follows. 

crGiE') := l^^""^ ./N>la..^m>0, 
1 otherwise . 

We write cr{E'), unless we make a point of referring to a different graph. 

Thus, when \S{a)\ = 2 and = 0, a best choice of is one for which 
cr{Ef) is maximum. Since E is finite, an E^ that maximizes cr{E^) exists. 

Definition 4. The cut-rate of G is defined as opt := max^'CB cr(-B') . 

By opt, we always refer to the cut-rate of the graph G. In case we refer to 
the cut-rate of some other graph, we add the name of the graph as a subscript. 
The value opt is a well known and studied attribute of a graph. It is equal to 
the reciprocal of the strength of a graph, as defined by Gusfield [14] and named 
by Cunningham [5]. There exists a combinatorial algorithm for computing the 
strength, and hence opt, that runs in time polynomial in the size of the graph, 
by which we always mean |y| -|- lE'j. 

We generalize the above technique to the case that a is not restricted. Assume 
again that H \s & minimum connected spanning subgraph of a. Intuitively, even 
if a has more than 2 distinct weights we would expect \E^f\E{H)\ to be as small 
as possible, i.e., Cg{E^)-Cg. We would also expect \{Ef[JE^)r\E{H) \ to be as 
small as possible, i.e., CG{EfiJE^) - Cg- If these both hold then \E^nE{H)\ = 
Cg{Ei U E2) — Cg{Ei), which is the increase in the number of components we 
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get by removing the edges of -Ef from G\E". Thus, the total weight contributed 
to H by edges in E{H) n E{E^) is x':^{CG{Ef U E!^) - CaiEf)). Now, unlike 
the previous case, we do not know X2- However, this is not a problem since, as 
we shall see, we are interested in the ratio 

a{E{H) n E^) _ Cg{E'} U E^) - CcjEr) 
a{E^) \E^\ 
We use the following notation to express this and its extension to more weights. 

Definition 5. For i= 1,. . . , we set 

- \Ef\ • 

The intuition above indeed holds, as stated in the following proposition, 
which we prove in Appendix 0. 

Proposition 1. Let H be a minimum connected spanning subgraph of a. Then 
\E{H) nE^\ = \E1\cr1 for every £ such that > 0. 

Using Proposition 1 we can relate the weight of a minimum connected span- 
ning subgraph of a to the sets of £{a). This relationship also characterizes the 
maxmin-edge-distributions, which are the edge-distributions whose minimum 
connected spanning subgraph weight is the maximum possible. 

Theorem 1. Let H be a minimum connected spanning subgraph of a and m = 
\£{a)\. Then a{H) < opt and we have a{H) = opt if and only if 

1. cri = opt for i = 1, . . . ,m — 1, and 

2. if cr!^ ^ opt then x^ = 0. 

Theorem 1 is proved in Appendix 1 . An immediate implication of Theorem 1 
is that opt is an upper bound on the value the wiretapper can achieve. This also 
follows from the well-known fact that the fractional packing number of spanning 
trees of a graph is equal to the strength of a graph, which in turn follows from the 
theorems of Nash- Williams [20] and Tutte [27] on the integral packing number 
(see also [3]). Since we have already seen that indeed the wiretapper can achieve 
opt by distributing all probability mass equally over an edge set that has cut-rate 
opt, we get the following. 

Corollary 1. The value of the wiretap game is opt. 

We know what the value of the game is and we know a characterization of 
the ^(a)'s for maxmin-edge-distributions a. Yet this characterization does not 
give us a simple way to find maxmin-cdgc-distributions. Resolving this is our next 
goal. Since the set of maxmin-edge-distributions is convex, it is easy to show that 
there exists a maxmin-edge-distribution /3 such that for every ei , 62 € E we have 
/3(ei) = /3(e2) if and only if 7(ei) = 7(62) for every maxmin-cdgc-distribution 7. 
This implies that £{P) refines f (7) for every maxmin-edge-distribution 7, where 
by "refines" we mean the following. 
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Definition 6. Let £1,82 be partitions of E. Then £1 refines £2 if for every set 
E' e £1 there exists a set E" e £2 such that E' C E". 

Thus, there exists a partition of E that is equal to £{f3) for some maxmin- 

edge-distribution /? and refines £(7) for every maxmin-edge-distribution 7. We 
call such a partition the prime-partition. It is unique since there can not be 
different partitions that refine each other. 

Definition 7. The prime-partition V is the unique partition that is equal to 
£{[3) for some maxmin-edge-distribution (3 and refines f (7) for every maxmin- 
edge-distribution 7. 

Theorem 2. The prime-partition exists and can be computed in time polyno- 
mial in the size of G. 

Theorem 2 is proved in Appendix 2. The prime-partition V reveals a lot about 
the structure of the maxmin-cdgc-distributions. Yet by itself V does not give us 
a simple means for generating maxmin-edge-distributions. Using the algorithm 
for finding V one can show that, depending on G, there may be a unique element 
in V whose edges are assigned by every maxmin-edge-distribution. 

Lemma 1. crciE) ^ opt if and only if there exists a unique set D £ V such 
that for every maxmin-edge-distribution a and e G D we have a{e) =0. If D 
exists then it can be found in time polynomial in the size of G. 

Lemma 1 is proved in Appendix 3. From here on we shall always refer to the 
set D in Lemma 1 as the degenerate set. For convenience, if D does not exist then 
we shall treat both {D} and D as the empty set. See Figure 1 for an example 
of the prime-partition and the degenerate set. 

We use the prime-partition to define a special subset of the minimum con- 
nected spanning subgraphs that we call the omni- connected- spanning- subgraphs, 
which are useful for proving the characterization of maxmin-edge-distributions 
and their refinements. 

Definition 8. A connected spanning subgraph H is an omni-connected-spanning- 
subgraph if for every P £V\{D} we have 

\E{H) n P| = |P| • opt . 

Proposition 2. There exists an omni-connected-spanning-subgraph. 

Proof. Let /3 be a maxmin-edge-distribution such that £{/3) = V. Let H he a, 
minimum connected spanning subgraph of /3. Then by Proposition 1, we have 
that H is an omni-connected-spanning-subgraph. □ 

The omni-connected-spanning-subgraphs are the set of the hider's pure strate- 
gies that are best responses against every maxmin-edge-distribution. 

Proposition 3. For every edge- distribution a such that V refines £{a) and 
a(e) = for every e G D and omni- connected- spanning- subgraph H, we have 
a{H) = opt. 



8 Haris Aziz, Oded Lachish, Mike Paterson, and Rahul Savani 

We prove Proposition 3 in Appendix 4. The importance of omni-connected- 
spanning-subgraphs stems from the following scenario. Assume that V refines £{a) 
and a{e) = for every e G D, and let H be an omni-connected-spanning- 
subgraph. By Proposition 3, we know that a{H) = opt. Suppose we can remove 
from H an edge from E{H) n P, where P is a nondogcnerate element of V, and 
add a new edge from another set P'\E{H) in order to get a new connected span- 
ning subgraph. Assume a assigns to the edge removed strictly more weight than 
it assigns to the edge added. Then the new c;onnccted spanning subgraph has 
weight strictly less than a{H) and hence strictly less than opt, since a{H) = opt 
by Proposition 3. Consequently, a is not a maxmin-edge-distribution and we can 
conclude that any edge-distribution /3 that assigns to each edge in P strictly more 
weight than to the edges in P' is not a maxmin-edge-distribution. This intuition 
is captured by the following definition, which leads to the characterization of 
maxmin-edge-distributions in Theorem 3. 

Definition 9. Let P,P' gV\ {D} be distinct. Then P leads to P' if and only 

if there exists an omni- connected- spanning- subgraph H with e E P \ E{H) and, 
e' e P' n E{H) such that {H \ {e'}) U {e} is a connected spanning subgraph. We 
denote the "leads to" relation by IZ. 

Definition 10. An edge-distribution a agrees with TZifV refines £{a) and for 
every P G P \ {D} that is a parent of P' E V \ {D} and e G P , e' € P' we have 

a{e) > a{e'), and for every e E D we have a{e) = 0. 

Theorem 3. An edge- distribution a is a maxmin-edge-distribution if and only 
if it agrees with IZ. 

Theorem 3 is proved in Appendix 5.1. By definition, there exists a maxmin- 
edge-distribution /? with £{(3) = V. By Theorem 3, we have that (3 agrees with TZ 
and hence the following holds. 

Proposition 4. The relation TZ is acyclic. 

This allows us to define the acyclic parent-child relation, which is a simplifi- 
cation of TZ and easy to find. 

Definition 11. Let P, P' E V \ {D} be distinct. We say that P is a parent of 
P' ( conversely P' a child of P) if P leads to P' and there is no P" E V such that 
P leads to P" and P" leads to P' . We refer to the relation as the parent-child 
relation and denote it by O. 

The following is an immediate corollary of Theorem 3 and Definition 11. 

Corollary 2. An edge-distribution a is a maxmin-edge-distribution if and only 
if it agrees with O. 

Sec Figure 1 for an example of an omni-conncctcd-spanning-subgraph and the 
exchangeability of edges between a parent and child. Corollary 2 defines a linear 
inequality for each parent and child in the relation O. Along with the inequalities 
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that define a probability distribution on edges, this gives a small number of 
two-variable inequalities describing the maxmin-polytope. In Appendix 8 we 
characterize the extreme points of max;min-polytope. The proof of the following 
theorem, which states that O can be found in polynomial time, can be found in 
Appendix 5.2. 

Theorem 4. The parent-child relation O can he computed in time polynomial 
in the size of G. 

The wiretapper will in general have a choice of infinitely many maxmin-edge- 
distributions. To choose a maxmin-edge-distribution, it is natural to consider re- 
finements of the Nash equilibrium property that are beneficial to the wiretapper 
if the hider does not play optimally. First we show how to minimize the number 
of pure best responses of the hider. To do this, we use the relation O to char- 
acterize a special type of maxmin-edge-distribution which achieves this. We call 
this a prime-edge-distribution. The prime-edge-distributions are characterized 
by the following lemma. 

Deflnition 12. A m,axmin- edge- distribution a is a prime-edgc-distribution if 
the number of the hider 's pure best responses against it is the minimum possible. 

Lemma 2. An edge- distribution j is a prime- edge- distribution if and only if 
7(e) > for every e ^ E \ D, and for every P,P' e P \ {D} such that P is a 
parent of P' and every e € P, e' G P' , we have 7(e') > 7(e"). 

Using this characterization one can easily check whether a is a prime-edge- 
distribution and one can also easily construct a primc-cdgc-distribution. 

We prove Lemma 2 in Appendix 6. The proof runs as follows. First we show 
that for any a that satisfies the condition of the lemma, every minimum con- 
nected spanning subgraph is an omni-connectcd-spanning-subgraph. Hence, us- 
ing Proposition 3, we get that for any a that satisfies the condition of the lemma, 
a connected spanning subgraph is a minimum connected spanning subgraph of a 
if and only if it is an omni-conncctcd-spanning-subgraph. These arc the only 
such maxmin-edge-distributions, since any maxmin-edge-distribution that does 
not satisfy the condition of the lemma has a parent and its child whose edges 
got the same weight. Consequently, by the definition of parent and child, it has a 
minimum connected spanning subgraph that is not an omni-connected-spanning- 
subgraph. 

We have already seen how to minimize the number of pure best responses of 
the hider, by playing a prime-edge-distribution. We now show how to uniquely 
maximize the weight of a pure second-best response by choosing between prime- 
edgc-distributions. This maximizes the least punishment that the hider will incur 
for picking a non-optimal pure strategy. 

Against a prime-edge-distribution, the candidates for pure second-best re- 
sponses are those connected spanning subgraphs that differ from omni-connccted- 
spanning-subgraphs in at most two edges. For each parent and child we have at 
least one of these second-best responses. A second-best response either is a best 
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Fig. 1. Left: The left figure illustrates the prime-partition T = {-Ei, . . . , -Es}. For this 
graph, opt — 1/2. The set Ei = {61,62}, the set E2 — {63,64}, the set E3 is equal 
to the edges of the left K4,, the set E4 is equal to the edges of the right K4, and the 
set E5 is equal to the edges of the K5. Suppose that maxmin-edge-distribution /3 is 
such that £{0) = V, and i?f — Ei for i = 1, . . . , 5. (There will be other maxmin-edge- 
distributions with the same partition in which £3 and E4 exchange roles.) Removing 
El from the graph creates one extra component by removing two edges, so we have 
erf = cr(-Ei) = opt = 1/2. Similarly we have cr^ = 1/2 for all fc = 1, . . .4. However, 
cr§ = 4/10 < 1/2 and so the set E5 is a degenerate set, as per Lemma 1. The figure 
shows the subgraph H indicated with solid edges. It is an omni-connected-spanning- 
subgraph, using two edges from each of the K^'s, one edge from the two edges that 
connect the two K4's, and one edge from the two edges that connect the two -ft'4's 
to the K5. Within the K^, an omni-connected-spanning-subgraph can use more than 
four edges, as this Ki, corresponds to the final element of the prime-partition with any 
strong linear order and achieves cut-rate 4/10, which is worse than opt = 1/2. The 
edge 63 can be replaced with the edge 61. Thus, the edges in the element of the prime- 
partition containing 61 must have weight at least that of the edges in the element of the 
prime-partition containing 63. Right: The right figure illustrates the partial order O 
and its layers {Li, L2, 1/3}. 

response with one extra edge, or it differs from a best response in two edges, 
where it has one less edge in a child of O and one more in the child's parent. 

We are only interested in the case that opt < 1, since the graph has opt — 1 
if and only if it contains a bridge, in which case the value of the game is one 
and the hidcr docs not have a second-best response. From here on we assume 
the following. 

Assumption 1 opt < 1. 

Intuitively, to maximize the weight of a second-best response, we want to 
minimize the number of distinct weights. The minimum number of distinct posi- 
tive weights we can achieve for a prime-edge-distribution is equal to the number 
of elements in the longest chain in the parent-child relation. This motivates tlie 
following definition. 

Definition 13. We define £i,£2, ■ • ■ inductively as follows. The set Ci is all 

the sinks of O excluding D . For j — 2, . . . , we have that Cj is the set of all the 
sinks when all elements of {D} U (Ui=i_..._j_i£i) have been removed from O. 
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Note that O is defined only over nondegenerate elements of P and hence the 
degenerate set is not contained in any of £i,£2, 

Definition 14. The layers C = {Li,...,Lt} of G are Li = U^'e^i-E" for 
i = l,...,t. 

Sec Figure 1 for an example of layers. The following theorem shows that there 
is a unique maxmin-edge-distribution that maximizes the difference between the 
payoff of a best and second-best response. This unique maxmin-edge-distribution 
turns out to bo the nucleolus of the spanning connectivity game, as explained in 
Section 4. For convenience, we refer to this strategy as the nucleolus. 

Theorem 5. Let 

1 

K = ^ . 

The nucleolus v has u{e) = i - k for every i G {1,. . . ,t} and e G Li and u{e) = 
otherwise. 

Theorem 5 is proved in Appendix 7. The proof says that the weight of a 
second-best response is opt + k, and this must be optimal since all the weights 
are multiples of k. For all other prime-edge-distributions there is a second-best 
response with weight less than opt + k. 



4 Spanning connectivity games 

A simple cooperative game {N,v) consists of a player set N = {1, . . . ,n} and 
characteristic function v: 2^ ^ {0,1} with ■u(0) = 0, v{N) = 1, and v{S) < v{T) 
whenever S CT. A coalition S* C iV is winning iiv{S) = 1 and losing if v(S) = 0. 
The payoff vector to the players x = (xi, . . . ,a;„) satisfies a;(A^) = v{N) = 1, 
with x{S) = X^iGS ^i- called an imputation if Xi > v{{i}) for all i €. N. For 
a game {N,v) and imputation x = {xi, ...,.t„), the excess e{x,S) of a coalition 

5 under x is defined as e{x, S) = x{S) — v{S). 

We relate our analysis of the wiretap game to two cooperative solutions based 
on the excess of coalitions: the least core and the nucleolus, which is a unique 
point in the least core. An imputation x is in the e-core if e{x, S) > — e for all 
S C N. An imputation x is in the least core if it is in the e-core for the small- 
est possible e. The excess vector of an imputation x is (e(a;, ^i), e(a;, S'2n)) , 
where e{x, Si) < e{x, S2) < • • • < e{x, S2r^)- The nucleolus is the element of the 
least core which has the largest excess vector lexicographically. The nucleolus is 
unique [23]. We denote the distinct excesses by (— ei, . . . , — ej) for t < 2", where 
ei > • • • > fit- Note that, by definition, ei = e, the least core value, which is the 
optimal value of the objective function in (4) . 

For a graph G = {V, E) with at least throe nodes, the spanning connectivity 
game, introduced in [1], has player sot E and characteristic function 

_ J 1, if there exists a spanning tree T = (TV, £") such that E' C S , 
^ ' \0, otherwise . 
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Since the graph has at least three nodes, v{{i}) = for ah i £ E, so x is an 
imputation if and only if it is a probability distribution on players, i.e., x € ^{E). 
The least core of the spanning connectivity game is the set of all solutions to 
the following linear program: 

min e 

s.t. e{x, S)>-€, for all S C E , (4) 

X £ A{E) . 

First we show that the least core is identical to the maxmin-polytopc. 

Proposition 5. The least core of the spanning connectivity game is the set of 
maxmin- edge- distributions of the wiretap game. 

Proof. The problems of finding a maxmin-cdgc-distribution and an element of 
the least core are given by the LPs (2) (from Section 2) and (4), respectively. 
The solution of (4) satisfies e > 0, since we have x{S) — v{S) > — e and x{S) < 1, 
and for any winning coalition v{S) = 1. So, for any losing coalition S, where 
v{S) = 0, the inequality e{x,S) = x{S) — v{S) > —e in (4) is redundant, and 
only the inequalities for winning coalitions, i.e., connected spanning subgraphs 
arc needed. Note that x{S) = JZees^e- Hence, the linear programs (2) and (4) 
have the same solutions with z = 1 — e, except for the objective functions that 
differ only by a constant. □ 

Now we show that the nucleolus is the unique maxmin-edge-distribution that 

minimizes the mimbcr of pure best responses of the hidcr and, given this, maxi- 
mizes the probability arising from the hider playing a pm'C second-best response. 

Proposition 6. The nucleolus of the spanning connectivity game is identical to 
the maxmin-edge-distribution defined in Theorem 5. 

Proof. The maxmin-edge-distribution u in Theorem 5 minimizes the number of 

pure best responses of the hider, i.e., it minimizes the number of minimum con- 
nected spanning subgraphs in C. This is equivalent to minimizing the number 
of ei-coalitions in the spanning connectivity game. Moreover, it uniquely max- 
imizes the probability for a successful wiretap of a second-best response of the 
hider, which is equivalent to maximizing £2- □ 

5 Further research 

The equilibrium strategies of the hider can be found using the complete refined 

principal partition [2] (our prime-partition is a truncation of this one). A char- 
acterization of these minmax strategics would be an interesting next step. 

Extensions to wiretap game. There are a number of natural extensions to the 
wiretap game. For example, if the wiretapper is allowed to pick multiple edges. 
In Figure 1, if the wiretapper can pick two edges, then by choosing ei and 
62, he guarantees success. With the number of edges to pick as input, is this 
problem computationally tractable, or hard? One could consider variants where 
the nodes of the hider are a subset of all nodes, unknown to the wiretapper. 
Another natural extension is to make the game dynamic with multiple rounds. 
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Further equilibrium refinements. Potters and Tijs [22] define the "nucleolus of 
a matrix game" and show that for a matrix the nucleolus, which is no longer 
unique as for a cooperative game, corresponds to the proper equilibria of the ma- 
trix game. This equilibrium concept, unlike Nash equilibria for zero-sum games, 
is not independent for the two players (for a Nash equilibrium, one player can 
independently play any maxmin strategy and the other any minmax strategy 
in equilibrium). Unlike the special strategy of the wiretapper we compute here, 
computing a proper equilibrium will require a simultaneous analysis of the strate- 
gies of both the wiretapper and hider, however it seems plausible that the struc- 
ture we have shown here may be enough to do this. So, can we efficiently find 
one proper equilibrium of the wiretap game, or even a characterization of the 
complete set of proper equilibria? What about other equilibrium refinements? 
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Appendix: Prelimiiiciries 

Proof of Proposition 1 

Let H he a, minimum connected spanning subgraph of a. And let t be the maximum 
such that X? > 0. We next show that n£f | = |£f |crf for i = 1, . . . 

Assume for the salce of contradiction that this is not so. Let k be minimal such that 
\E{H) n ^ \E^\cr'^. By the minimality of A; we have 

\E{H) n (uti'sDI = E (5) 

i=l 

Set E' = ujL^Sf . By the definition of cut-rate the number of connected components 
in G \ is 

CG{E') = l + J2\Er\cr?. (6) 

Thus \E{H)r)E'\ is at least \E^\crT and therefore by (5) we have \E(H)nE^\ > 

\Ek\cr^- 

Assume \E{H) n > 1-B^|cr^ Then, by (5), we have 

\EiH)nE'\>pjEr\arf. (7) 

We show next that this implies that there exists a connected spanning subgraph whose 
weight by a is strictly less than a{H) in contradiction to H being a minimum conuected 
spanning subgraph. Set s = Cg{E') and let Ci, . . . ,Ca be the connected components 
of G\ E' . Now as is a minimum connected spanning subgraph the set of edges in 
E{H)C\E' does not have a cycle, otherwise we could have removed one of them to get a 
connected spanning subgraph with strictly less weight. Thus the number of connected 
components of E{H) \ is 1 + [_E n E{H)\. Set r = \E' Ci E{H)\ and let Hi,...,Hr 
be the connected components of H \ E' . 

Note that for each i £ {1, ■ ■ ■ ,r} there exists a unique j G {1, . . . , s} such that 
E{Hi) C E{Cj). For each j G {1, . . . , s} set /j to be the set of alH G {1, . . . , r} such that 
E{Hi) C E{Cj). By (6) and (7) we have s < r and therefore by the pigeon-hole principle 
there exists j G {1, . . . , r} such that > 1. Since Cj is a connected component and H 

a connected spanning subgraph there exist x,y £ Ij and e — {u, v} G E{Cj)\u\j!^[E{Hi) 
such that u G V{Hx) and v G V{Hy). Again because H \s a. connected spanning 
subgraph there is a path in H between u and v this path contains edges not in E{Cj) 
because m, v are in different connected components of H\ E'. Thus this path contains 
an edge e' G E' because only edges from E' connect the vertices of Cj to the rest of the 
graph. Consequently {H \ {e'}) U {e} is a connected spanning subgraph. Since e ^ E' 
we have a{e) < a(e') and consequently a{H) > a{(H \ {e'}) U {e}). 

Fact 2 Let H be a rmnirnum connected spanning subgraph of a and m = £{a) then 
a{H) = '}2"Li ^ilEflcrf and for each i = 1, . . . , m if erf < 1 then there exists e G 
E?\E{H). 

Proof. By definition \E{H)\ = Y.T=i \E{H) n Ef\. Therefore a{H) = Y.T=i ^?\E{H) n 
|. By applying Proposition 1 we get that a(H) = Y.T=i x"\Ef\crf . 
Fbc i G {1, . . . , m). By Proposition 1 we have \E{H) nEf\ = \Ef\crt and hence if 

erf < 1 then \E{H) nEf\< \Ef\ and therefore Ef \ E{H) is not empty. □ 
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Fact 3 Let Ei,. . . ,Es C E be such that EiDEj = for every distinct i,je{l,..., s}. 
For £ = 1, . . . , s let re be the cut-rate of Ei in G\ U^zl-E^. Assume that re > y (re < y) 
for each £ = 1, . . . ,s. Then if there exists i £ {1, . . . , s} such that ri > y (ri < y) we 
have cr(Ui=iEi) > y (r < y) and otherwise cr(U|=i£i) = y. 

Proof. By the definition of cut-rate CG{Ui=iEi) = Co + 5I)i=i and hence 

Note that the above inequality is strict unless r; = y for i = 1, . . . , s. The proof for the 
case that ri < y for i = 1, s, is the same. □ 

Definition 15. A minimal set E' C E such that cr{E') = opt is a prime-set ofG. 

Proposition 7. For E', E" C E such that cr{E') = cr{E") = opt the following holds: 

1. opta\E' < opt- 

2. IfE'' / E' then crG\E'{E" \ E') = opt. 

3. If E" r\E' then cr{E" n E') = opt. 

4. If E" \ S' ^ then optG\E' = opt. 

5. If E' is a prime-set then either E' C E" or E' HE" = ID. 

Proof. Note that opt = only if E = II) and therefore in this case the proposition 

trivially liokls. Assume that opt > 0. Hence by the definition of cut-rate we have 
E' , E" 7^ 0. We shall also assume that E' 7^ E" since otherwise the last four items hold 
trivially. We next prove the first item. 

Let E* C E\E' be such that crG\E'{E*) = optG\E' ■ By definition such a set exists. 
Observe that crQ\^E'{E*) < opt because otherwise since cr{E') = opt by Fact 3, we 
have cr{E' U E") > opt, which is a contradiction to the maximality of opt. 

We now prove the second and third items. If E" n i?' = then both items trivially 
hold. Assume E" n / 0. According to the first item crG\E'{E" \ E') < opt and by 
definition cr{E"riE') < opt. Thus as cr{E") = opt by Fact 3 we have crG\E' {E"\E') = 
cr{E" n E') = opt. 

Finally we prove the last two items. Assume E"\E' ^ 0. By the first item opta\E' < 
opt. By the second item crG\E'{E" \ E') = opt and hence also optG\E' > opt and 
consequently optoxE' = opt- 

Assume that £ is a prime-set. If £'nS" ^ then by the second item cr{E'nE") = 
opt and hence by the definition of prime-set E' n E" = E' which implies E' C E" . D 



1 Appendix: Proof of Theorem 1 



Let /? be a edge-distribution and s = \£{f3)\. We say [3 is strong if erf = opt for 

£ — 1, . . . , s — 1 and if erf 7^ opt then a;f = 0. From here on in this section _ff is a 
minimum connected spanning subgraph of a. Assume a is strong. By Fact 2 

\£(c)\ 

a{H) = J2 ^e\E?\cr?. 

e=i 

Therefore as we have erf = opt for every i such that xf > we conclude 

\£(c)\ 

a{H) = opt J2 

e=i 
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Finally, since a. is an edge-distribution Yl}i=\^^ = li we get that a(-ff) = opt. 

Now the theorem directly follows from the subsequent lemma. □ 

Lemma 3. Let H he a minimum connected spanning subgraph of a, then a{H) < opt 
and if a{H) = opt then a is strong. 

Intuition for the proof Lemma 3. The proof of the Lemma 3 is by induction on s, 
the maximum index such that > 0. The basis of the induction is straightforward. 
The induction assumption states that for an edge-distribution f3 with s — 1 distinct 
strictly positive weights, and minimum connected spanning subgraph H' of (3 we have 
P[H') < opt and if l3{H') — opt then /3 is strong. 

The main idea in the induction step is to show that one can shift around some of 
the weight of a in order to get a new edge-distribution f3, such that /3 has exactly s — 1 
strictly positive distinct weights and P{H') > a{H) (or f3{H') > a{H)), where H' is 
a minimum connected spanning subgraph of (3. Now since /? has s — 1 strictly positive 
distinct weights the induction assumption applies to it and hence l3{H) < opt. This in 
turn implies that a{H) < opt. Now by the above if a{H) = opt then also j3{H) = opt 
and hence by the induction assumption /3 is strong. With a bit of extra work this leads 
to a being strong. 

The induction step consists of two separate cases. In the first case it is assumed 
that cr" < cr(U|-iSf ), in the second cr? > cr(u|;i£;f ). 

In the first case, by taking all the weight assigned by a to the edges of and 
distributing it equally among the edges in U'l^lEf, one gets a new edge-distribution 
7 that has s — 1 distinct strictly positive weights and a{H) < ^{H'), where H' is a 
minimum connected spanning subgraph of 7. In the second case, one obtains the new 
edge-distribution from a in the following way. A constant amount of weight x is reduced 
from each edge in L)^~lE^' and divide the total removed weight x| ^tZi -^fl equally 
among the edges of E" thus getting a new edge-distribution 6 where a{H) < S{H"), 
where H" is a minimum connected spanning subgraph of 6. The value of x is chosen 
so that 5 gives the same weight to all the edges in E" U Ef_i. Therefore the number 
of strictly positive weights of 5 is s — 1. 

Proof of Lemma 3. If s = 1 then by Proposition 1 we have a{H) = Xi\Ef\crf = 
cr" = cr{E") < opt. Note that if equality holds then erf = opt and hence a is strong. 

Let s > 1. The induction assumption is that for every edge-distribution that 
has s — 1 strictly positive weights, wo have P(H') < opt for H' that is a minimum 
connected spanning subgraph of /9 and if P{H') — opt then /3 is strong. 

For the inductive step we deal with two cases separately. In case (a) we assume 
that 



crt < / ' " . (8) 



In case (b) we assume that 



Note that we chose to write the more cumbersome ^r^U ' ' ' ' instead of cr(U|'-i|£;f|) 
as this form serves our purpose better. 

(a) Set 

^ xf\Ef\ 
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which is the total weight of E" divided equally among all edges in VJl^lEf. Define 
7 : E{G) ^ R so that 7(e) = a(e) + p for every e € UJ^JB" and 7(e) = for every 
e e E{G) \ yj'^jZlEf. According to this definition 

^7(e) = ^a(e)- 53 x?+ P- 

Since a is an edge-distribution we can replace J2eeE(G) '^(^) with 1. Doing so in the 
above equation in addition to replacing p by its value gives us 

Y: 7(e) = 1 - (x':\e:\ - x: \Er\) = i. 

eeEiG) \ l^i=\ I i=l / 

By definition 7 has exactly s — 1 strictly positive weights and hence, 7 is an edge- 
distribution and the induction assumption applies to 7. Let H' bo a minimum connected 
spanning subgraph of 7. By the induction assumption 7(-ff') < opt. We next show that 
a{H) < 7(-ff') and hence a{H) < opt. According to the construction of 7 wo have 
> xlj if and only if x" > Xj for any i, j € {1, . . . , s — 1} and therefore E" = E^ for 
i = 1, . . . , s — 1. This in turn implies that erf = crj for i = 1, . . . , s — 1. According to 
Fact 2 we have 

^{H') = Y^2cr]\E]\ . 

i=l 

By replacing E" with E^ and erf with crJ and x1 with a:f + p for i = 1, . . . , s — 1 we 
get 

7(/?') = £« + p)cr-?|£r|. 

This implies 

s s— 1 

7(ir') = ^ a;? crHiSr I - x?cr? jiJ? [ + p ^ cr? jiSf 1. 

i=l i=l 

By Fact 2, we can replace Yll^-^ x"cri\E"\ by a{H). By also replacing p with its value 
we have 

7(ff') = a{H) - x:\Ef \ (a-t - ^gj^j^^ . (10) 

Now by (8) and (10) we have a{H) < j{H'). 

Assume that a(H) = opt. Since a{H) < 7(-ff') < opt we got jiH') — opt. Thus by 
the induction assumption 7 is strong and hence crJ = opt for i — l,...,s — 1. Since 
erf = cr] = opt for i = 1, .... s — 1, to conclude that a is strong. Thus, wo only need 
to show that erf = opt. By replacing a{H),'y{H'),crf , . . . erf_i with opt in (10) we 

ar^ = ^1^1^^ opt. 



20 



Haris Aziz, Oded Lachish, Mike Paterson, and Rahul Savani 




(11) 

otherwise. 

Note that x is such that a:" + x = xf-i — x ^J-i} o ■ Consequently, S assigns the 

same weight to each edge in Ef_i U E" and hence S has exactly s — 1 strictly positive 
weights. 

We next show that 5 is an edge-distribution. By definition 
^ Sie)= ^ a(e)+^x- E X; 



eeB(G) ee-B(G) eS-B? eSU' 



Since a is an edge-distribution we can replace X)ee-B(G) '^(^) 1 ™ above to 
conclude 

J2 s{e) = i+x (\Ef\ - I E i^n) = 1. 

Note that by the choice of x we have (5(e) > a:" for every e G Uf^iSf and since 
(5(e) = for any other edge all the weights S assigns are non-negative. Thus S is an 
edge-distribution. Let H' be a minimum connected spanning subgraph of 6. Now as 6 
is an edge-distribution with s — 1 strictly positive weights, by the induction assumption 
wc have 5{H') < opt. We conclude the claim by showing that a{H) < 5{H'). 
By Fact 2 we have 

s-l 

6{H') = J2^Urt\E!\. (12) 

i=l 

According to the construction of 5 we have xf > x^j if and only if xf > xf for any 
hj £ {!> • ■ ■ I s — 2} and therefore £f = Ef for i = 1, . . . , s — 2 which in turn implies 
that erf = erf for i = 1, . . . , s - 2. Thus = and erf = erf for i = 1, . . . , s - 2. 
Consequently by replacing | Sf _ j | with | E^_ i\ + \ E" \ and cr] with erf for i = 1 , . . . , s — 2 
in (12) we get 

s-2 

5{H') = E^crf |£;f I +xf_ierf_i(|£;?_i| + |S?|). (13) 



1=1 



By definition of cut-rate we have 



, _ K_i|cr?_i + |i5?_iK 



\Ei-,\ + \Ef\ 
Plugging this in (13) gives us 

s-2 
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Since xl = x" + X and xf = xf — x ^J-i,^ — : for i = 1, ... s — 2 we get 

5{H') = Ylx?crr\E?\ + x\E:\ f cr? - ^g-i , j., J • (14) 

By Fact 2 we can also replace J2i=i a^fcr" |-Ef| with a(J/) in (14). This together with 
(9) implies that 5{H') > a{H). Note that as opt > S(H') it can not be the case that 
a{H) = opt. n 



2 Appendix: Prime partition 

In this section we prove Theorem 2. To do so, we introduce a polynomial time algorithm 
that on input graph G — {V, E) returns a partition of E, which afterwards we show is 
the prime-partition of G. The algorithm uses oracle access to a routine PrimeSet that 
given a graph returns its cut-rate and one of its prime sets. This routine runs in time 
polynomial in the size of G and is introduced in Subsection 2.3 



2.1 Construction of the prime- partition 



Algorithm 1 Prime-partition construction 

Input: Graph G . 
Output: Prime partition V. 
1: 

2: if E{G) = then 
3: return V 
4: end if 

5: 1 

6: {opt, Pi) ^ PrimeSet (G) 

7: Gi ^ G 

8: repeat 

9: V^VVJ {Pi] 
10: Gi+i ^Gi\Pi 
11: i'^i + l 
12: (c, Pi) ^ PrimeSet(Gi) 
13: until c < opt 
14: if E{Gi) ^ then 
15: P^ru {Pi} 
16: end if 
17: return V 



Each computation done by Algorithm 1 requires running time polynomial in \V\ 
including the calls to PrimeSet according to Appendix 2.3. Therefore, the only reason 
the running time of Algorithm 1 may be too long is the repeat loop. Note that, if 
PrimeSet returns an empty set, then it also sets c = 0. Thus, after any iteration of the 
repeat loop that is not the last the number of edges of G' is decreased by at least 1. 
Observe that PrimeSet returns (0, 0) and does not reach the repeat loop if opt = 0. 
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Thus only if opt > then the repeat loop is reached and then the above ensures 
that it goes through at most \E\ iterations. Hence the running time of Algorithm 1 is 
polynomial in the size of G. 

From here on in this section t = \V\, where V is the output of Algorithm 1 on input 
graph G, and the elements of V are named as they were named by Algorithm 1, thus 
V = {Pi,..., Pt}. In addition let E° = <S and for each A; = 1, . . . , t let = uf=iPi 
and r-fc be the cut-rate of in G \ E''~^. 

2.2 The output of Algorithm 1 is the prime partition 

Proposition 8. There exists a maxmin-edge-dtstribution /3 such that £{I3) = V ■ 

Proof. Set p = ^ — ,} ... I and let /3 : -E — > K, where for each i = 1, . . . ,t and e £ Pi 
we have /3(e) = {t — i)p. Observe that 

^ /3(e) = j^xt\Ef\ =j^p{t- i)\E^\ =pY.{t- i)\El\ =pp-' = l 

eS-B i=l 1=1 i=l 

and hence (3 is an edge-distribution. By definition E? = Pi ior i = 1, . . . ,t. We next 
show that ri = opt for i = \, . . . ,t — \. By Theorem 1 this implies that /3 is a maxmin- 
edge-distribution. 

Algorithm 1 selects Pi so that ri = opt. Let k < t and assume that rj = opt for 
every j < k. Hence by Fact 3 we have cr{E''~^) = opt. Consequently rk < opt since 
otherwise by Fact 3 we get that cr{E''~^) > opt. As Pfc is not the last set added to P 
by Algorithm 1, we have rk > opt and hence it is the case that rk = opt. D 

Wc next show that P refines £{a) for every maxmin-cdgo-distribution a. We start 
with a simple case that wc use later on to prove the general result. 

Proposition 9. If cr{E') = opt for E' C E then P refines {E' , E \ E'}. 

Proof. li E' = E then the proposition holds trivially. Hence wc only need to prove 
the proposition holds when E' C E. Wc show that P^ n = or P^ C E' for every 
i = 1, . . . , t Let fc e {1, . . . , t}. If E'XE'"'^ = then PkDE' = 0. Therefore we only need 
to deal with the case that E' \ E'°~ ^ 0. Assume this is indeed so. By Proposition 8, 
we have ri = opt for i = 1, . . . , i — 1 hence by Fact 3 we get cr{E^~^) — opt. Since also 
cr{E') = opt, by Proposition 7, we have optQ\^k-i = opt and crQ\Ek-i{E' \ E'^^^) = 
opt. We separate the proof into two cases the first k = \, . . . ,t — 1 and in the second 
k = t. 

Recall that Algorithm 1 selects Pk so that it is a prime-set in G \ E'"~^ . So now 
optQ^^k-i = opt and crQ\^^k-i{Pk) = crQ\i;k-i{E' \ E''^^) = opt. Thus by Propo- 
sition 7 either Pk n (P' \ P*=-') = or P^ C (P' \ P*=-i). If P^ C (P' \ P^-^) then 
Pk C P', and if Pk n (P' \ P''"^) = then Pfc n P*^"^ = because Pfc n E^-^ = 0. 

Assume k = t and for the sake of contradiction that P' \ E^~^ ^ 0. Since we have 
shown that optQ^^^t-i = opf and cr(jy£;t-i(P'\P*"^) = opt it is the case that G\P*~"' 
has a prime-set that has cut-rate opt in G\E*~^ . This subset is strictly contained in 
E\E*~^ Proposition 7 implies that every prime set in E\E*~^ is strictly contained in 
P\P*~^. Hence, Algorithm 1 would have found a prime- sot P* C P\P*~^ and added 
it to V. That is P* £ P. Yet this can not be since by construction P is a partition 
of P. n 



Proposition 10. If 'y is a maxmin-edge-distribution then V refines £(7). 
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Proof. Let t = |f (t)!- Recall that since 7 is a maxmin-edge-distribution by definition 
for i = 1, . . . , t — 1 wo have crj — opt. If t = 1 then the only sot in £(7) is E 
and hence the lemma trivially holds. By Proposition 9 the lemma also holds when 
|£'(7)| = 2. Assume by way of induction that proposition holds for any partition S = 
{Ei,...,Et-i} of E such that crQ\^Je_ ^.(S^) = opt. Let <Si = {UlzlE°',E^} and 
82 = {El,.. . ,E^_2,Ef'_iUEf'}. Note that if :P refines both5i and ^2 then it refines 5. 
By the induction assumption, V refines S2. By Fact 3 we have that cr'(U^7^-^i) = "pJ 
and therefore P refines iSi by Proposition 9. □ 



2.3 PrimeSet 



In this section we explain the subroutine for finding a minimal optimal set, which 
we call a PrimeSet. We assume that the graph is connected, in case it is not connected 
we run the routine separately on each connected component and return the PrimeSet 
(and value opt that achieves the largest opt among these connected components. If 
there is more than one, pick one arbitrarily. By Fact 3, the cut-rate of U™l^^^i C is 
opt and therefore by Proposition 9, we have that V refines Si. For our goal, we extend 
the notion of cut-rate of a graph to edge weighted graphs. 

Definition 16. Let E' C E and w : £ — »■ K"*". The cut-rate of E' in G,u is denoted 

by cru{E') and defined as follows. 

I otherwise . 

The cut-rate of G, uj where oj : E ^ Jft"*" is defined as 

opt^ := raax cr^{E') (16) 

There exists strongly polynomial algorithms in [5, 26, 4] that on G, ui returns opt^. 
We shall assume from here on that opt^ is given and omit the fact that this is done 
by the mentioned algorithm. 

A prime-set of G is found as follows. If S = then stop and return (0, 0). Otherwise, 
set w : S — > K"*" so that a;(e) = 1 for every e £ E. Note that in this case opt = opt^ 
and hence we assume opt is known. Set ut' = ut. Next iterate e over the elements of 
E according to some arbitrary order and in each iteration do the following. Set Lu'{e) 
to be 2 and if opt^i = opt then set lu to be u>' and otherwise set lj' to be (j;. That is, 
a;(e) is changed only if opt^, — opt and otherwise remains the same. After the iterative 
process is over set E' = {e € E \ u}{e) = 1} and return {opt, E'). Note that the total 
number of operations done is polynomial in the size of G and so is the running time. 
To show that indeed this achieves our goal, we only need to prove that E' is a prime 
set of G. 

Let us look at any fixed iteration over e. By definition uj is changed only if opt,^, = 
opt and then it is set to uj' . This implies that there exists E* C E such that cr^i{E*) = 
opt. Now it can not be the case that ^'(e) = 2 for some e € E*, since this would imply 
that cr{E*) > opt. Consequently, cru,{E*) = opt. This is true for any fixed iteration 
and hence also for the last. Therefore, there exists E" C E' such that cr{E") = opt. 
Finally assume for the sake of contradiction that E" C E' . Let e' e E' \ E" . This 
implies that in the iteration dedicated to e' we had opt^, 7^ opt. Since at this stage 
u>'{e) = 1 for every E" it must be that opt^, > opt. Yet this can not be since the 
weights assigned to each edge by uj' is at least £is that assigned by u) and hence at every 
iteration opt^, < opt. 
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3 Appendix: Proof of Lemma 1 

If cr{E) = opt, then an edge-distribution that assigns equal weight to all edges is a 
maxmin-edge-distribution and so there is no degenerate set. 

Wc now prove that if cr{E) 7^ opt, then the degenerate set exists, it is unique, and 
can be found in running time polynomial in the size of G. 

Assume that cr{E) ^ opt. By the definition of opt, this can only happen if cr{E) < 
opt. Let /? be a maxmin-edge-distribution such that S{f5) = V and set t = \V\. By 
definition, i?f assigns strictly positive weights to the edges in each E? for every i = 
1, . . . ,t — 1. Hence, the only candidate for being the degenerate set is Ef . We next 
show that this is indeed the case. 

Assume for the sake of contradiction that there exists a maxmin-edge-distribution 7 
that assigns strictly positive weights to the edges in E^ . Let d = minjg{i^...^(_i}{a;f — 
xf_-i}/10 and set 6 = {1 — d)P + d'y (the choice of 10 is arbitrary). Observe that S has 
the same number of distinct weights as 7, and £{S) = £{(i) and we have Ef = Ef 
for i = 1,. . . ,t. Let H he a, minimum connected spanning subgraph of d. Since 5 is a 
convex combination of maxmin-edge-distributions it is a maxmin-edge-distribution and 
therefore, by Corollary 1, we have 6{H) = opt. We next get the required contradiction 
by showing that 5{H) < opt. 

Since £{6) is a partition of E we have 

S{H) = J2xt\E{H)nEf\. (17) 

As (5 is a maxmin-edge-distribution, by Theorem 1, we have erf = opt for i = 

1, . . . ,t — 1 and hence erf < opt, since otherwise, by Fact 3, we have cr{E) > opt. By 
Proposition 1, we have \E{H) nEf\ = opt\Ei\iori = l,...,t-l. Applying this to (17) 
we get 

t-i 

5{H) = xt\E{H)r)Ef\ + optJ2x"i\Ef\ . (18) 

i = l 

Now, since H is a minimum connected spanning subgraph, \E{H)r\E^ \ is the minimum 
possible, which in this case is cri\Et\. Since erf < opt, we get that crt\Ef\ < opt\Ef\. 
Thus, by replacing \E{H) n Ef\ by opt\Ef\ in (18), we get 

t 

S{H) < optJ2xt\E!\ = opt , 

i=l 

where the equality is because 5 is an edge-distribution. 

We now explain how to compute D. Once opt is known, one only needs to check if 
l^jip = opt. If the answer is yes, then there is no degenerate set; if the answer is no, 
then D is the last set inserted to V by Algorithm 1. 

4 Appendix: Proof of Proposition 3 

Let H be an omni-eonnected-spanning-subgraph and a such that V refines £{a) and 
a{e) = for every e £ D. Thus for each P £ V there exists t/^ such that a(e) = 
for every e € P. Since 'P is a partition of E, we have a{H) = IZpgp U^W PI P\ and 
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as is an omni-connected-spanning-subgraph also \H D P\ = \P\opt for every P £V. 
Consequently, 

aiH) = ^ y^lPlopt = opt ^ y''\P\. 
Pev Pev 

Now, as a is an edge-distribution and X]pgp y^\P\ ~ 1) with the above, we get a(H) = 
opt. Now, if a is maxmin-edge-distribution, by Corollary 1, the value of the game is 
opt and if is a minimum connected spanning subgraph of a. 

n 

5 Appendix: Partial Order 
5.1 Proof of Theorem 3 

Note that if P = 1 then the theorem trivially holds hence we assume V > 1. 

Let a be a maxmin-edge-distribution. By Lemma 1 we have a{e) = for every e € 

D. Assume for the sake of contradiction that a docs not agree with TZ. By Definition 7, 
we have that V refines a and hence since a does not agree with TZ there exist P £ 
V \ {D} that leads to P' G P \ {-D}, an omni-connected-spanning-subgrapli H , e £ 
E{H) \ P and e' € P' n E{H) such that a(e) < a(e') and H' = {H \ {e'}) U {e} is a 
connected spanning subgraph. Since H is an omni-connected-spanning-subgraph and 
a a maxmin-edge-distribution by Proposition 3 we have a{H) = opt. Thus cic{H') = 
a{H) + (a(e) — a{e')) < opt. This is in contradiction to Fact 1, which implies that 
<^{H') > opt since a is a maxmin-edge-distribution. 

Assume a is an edge-distribution that agrees with TZ. We next show that this 
implies that a is a maxmin-edge-distribution. 

Let m be the number of the strictly positive weights of a. Assume by way of 
contradiction that a is not a maxmin-edge-distribution. By Theorem 1 this can only 
happen if there exists i £ {1, . . . , m} such that erf ^ opt. Let £ be the smallest element 
in {1, ... , m} such that cr" / opt. Let E' = uf^iEf. We show next that cr{E') < opt. 
If £ = 1 then cr" < opt since cr" is the cut-rate of Ee in G. Thus in this case E' — Ee, 
and the goal is achieved. Assume that £ > 1. By the minimality of £, we have that 
erf = opt for i = 1, 1. If erf > opt then by Fact 3 we have cr(uf=ii?f ) > opt 

which is a contradiction to the definition of opt. Thus, as cr^ ^ opt we have cr^ < opt 
and hence again by Fact 3 the cr{E') < opt. 

Let Ci, . . . , Cs be the connected components of G\E' . Let H be an omni-connected- 
spanning-subgraph and let Hi, . . . , Hr be the connected components of E(H)\E' . Note 
that for each i £ {1, . . . ,r} there exists a unique j £ {1, . . . , s} such that E(Hi) C 
E{Cj). For each j G set Ij to be the set of all i G {!,..., r} such that 

E{Hi) C E{Cj). Assume that s < r, we shall show afterwards that this is indeed true. 
By the pigeon-hole principle there exists j G {1, . . . , r} such that > 1. Since Cj is a 
connected component and H a connected spanning subgraph of G there exist x,y £ Ij 
and e = {u, v} G E(Cj)\u['i[E{H^) such that u G V(H^) and v G V{Hy). Since H is a. 
connected spanning subgraph there is a path in H between u and v this path contains 
edges not in E(Cj) since u,v are in different connected components oi H \ E' . Thus 
this path contains an edge e' G E' since only edges from E' connect the vertices of 
Cj to the rest of the graph. Consequently [H \ {e'}) U {e} is a connected spanning 
subgraph of G. Let P,P' £ V be such that e G P and e' G P' . By the above P leads 
to P' . Yet, this can not bo since a(e) < a(e') and a agrees with TZ. 

It remains to show that indeed s < r. By the definition of cut-rate the number 
of connected components s in G \ i?' is cr{E')\E'\, which is strictly less than opt\E'\. 
Now as a agrees with TZ we know that P refines E' . Hence E' is the union of sets 



26 



Haris Aziz, Oded Lachish, Mike Paterson, and Rahul Savani 



in V \ {D}. Consequently, by the definition of a omni-connected-spanning-subgraph, 
we have E{H) HE' — opt\E'\. Hence r — opt\E'\ because the number of connected 
components in H \ E' is the number of edges in E{H) n E' . D 

5.2 Proof of Theorem 4 

Definition 17. We say that P is an ancestor of P' €V if there is a chain in O 
from P to P'. 

We show that for each P £'P\ {D} we can find all of the ancestors of P. Once we 
know the ancestors of each element V \ {D} finding the parent of each such element 
is easy. An ancestor P of P' is also a parent of P' if there does not exist an P* , that 
is neither P nor P' , such that P is an ancestor of P* and P* is an ancestor of P' . 
Checking this for each pair clement and each one of its ancestors requires running time 
that is polynomial in the size of G. 

To achieve our goal we need the following proposition. 

Proposition 11. Let V CV\ {D}, and P* € V* and set E* = Upev'P then 

— cr{E*) = opt ifV* contains only P* and all its ancestors. 

— If cr{E*) = opt and V* contains an element that is not P* or one of its ancestors 
then it also contains such a P for which cr{E* \ P) = opt. 

Proof. Set a : E{G) ^ K so that a(e) = if e e and a(e) = otherwise. Now 
a is an edge-distribution, V refines £(a) and E" = E* , E2 = E\E* and a(e) = for 
every e £ D. 

We now prove the first item. For any parent and its child if the child is in V* it is 
either P* or one of its ancestors. Thus the parent is also an ancestor of P* and hence 
is also in V*. Consequently a agrees with O and hence by Theorem 3, we have that a 
is a maxmin-edge-distribution. This in turn by Theorem 1 implies cr{E*) = opt. 

We now prove the second item. Assume cr{E*) — opt and V* contains an element 
that is not P* or one of its ancestors. Then there exists P £P* that is not an ancestor 
of any other element in P* . Since cr(E*) = opt by Theorem 1 a is a maxmin-cdgc- 
distribution. Hence by Theorem 1 a agrees with O. 

Set (3 : E{G) ^ R so that /3(e) = ^ if e G and /3(e) = otherwise. Now f3 is 

an edge-distribution, P refines £(P) and E^ = E* , E2 = E\E* and /3{e) = for every 
e £ D. The only way that (5 does not agree with O is if a child of P is in V* \ {P}, 
yet this can not be, since P is not an ancestor of any element in V* . Thus, (3 agrees 
with O and hence, by Theorem 1, /? is a maxmin-edge-distribution. By Theorem 1, this 
implies that cr{E* \ P) = opt. □ 

We next show how to find the ancestors of P' . Set V = V\{D} and E' = Upgp/P. 
If there exists P* e V' such that P* 7^ P' and cr{E' \P) = opt remove it from V' and 
recompute E' . Repeat until no such clement is found. 

Note that this requires \V\ repetitions each taking a polynomial time in the size 
of G. Consequently, the running time is polynomial in the size of G. 

When V = V \ {£>} we have cr{E') = opt because of the following. By definition 
there exists a maxmin-edge-distribution (5 such that f (/?) = V. Note that V' is all the 
non- degenerate sets in £{(3) and hence cr{E') — cr(U^iijf ). By Theorem 1 erf = opt 
for i — \, . . . ,m, where m is the maximal index such that x'^ > 0. Hence according to 
Fact 3 we have cr(Ul!ii£f ) = opt. 

Finally we show that at the end what remains in V' is only P' and all its ancestors. 
The set P' is never removed from V . By Proposition 11 for any ancestor P* of P' 
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it is the case that cr{E' \ P*) < opt and hence none of the ancestors of P' are ever 
removed. Also by Proposition 11 as long as P' does not contain only P' and each one of 
its ancestors there exists a P* such that cr{E' \ P*) = opt and hence such an element 
will be removed. Thus only P' and each one of its ancestors are never removed and 
consequently they are the only elements remaining in V' at the end of the process. □ 

6 Appendix: Proof of Lemma 2 

Let /3 be a maxmin-edge-distribution such that one of the following holds 

1. There exists P €V\ {D} that is a parent oi P' €V\ {D} such that /3(e) = /3(e') 
for every e £ P and e' G P'. 

2. There exist P eV\ {D} such that /3(e) = for every eSP. 

We shall show that d has a minimum connected spanning subgraph that is not an 
omni-connected-spanning-subgraph. Afterwards we shall show that for every 7 for 
which both conditions do not hold, every minimum connected spanning subgraph of 

7 is an omni-conncctcd-spanning-subgraph. According to Proposition 3, every omni- 
connected-spanning-subgraph is a minimum connected spanning subgraph of 7, this 
means that such 7 arc the only maxmin-edge-distributions that have the minimum 
possible number of minimum connected spanning subgraphs. 

Assume the first condition holds for /3. By the Definition 11 there exists an omni- 
connected-spanning-subgraph H and edges ei £ P\E{H), 62 € P' C\H such that H' = 
(TU {ei}) \ {62} is a connected spanning subgraph. Observe that H' is not an omni- 
connected-spanning-subgraph of /3 but is a minimum connected spanning subgraph of 
P since l3{H') — P(H) — opt. Assume the second condition holds for /3. Let H be an 
omni-connected-spanning-subgraph. Recall we assumed opt < 1 and hence as H is an 
omni-connected-spanning-subgraph we have \E{H) f) P\ = opt\P\ < \P\ and therefore 
there exists e £ P \ E{H). Since _ff is a minimum connected spanning subgraph of (3 
by Proposition 3 and /3(e) = we also have H U {e} is a minimum connected spanning 
subgraph of (5. Note that H U {e} is not an omni-connected-spanning-subgraph. 

Let 7 be some maxmin-edgc-distribution for which the above two conditions do 
not hold. That is, 7(e) > for every e £ E\D and P G P \ {D} that is a parent of 
P' €V \ {D} and every e G P, e' G P' we have 7(e) > 7(e'). 

From here on let H he a. minimum connected spanning subgraph of 7. We next show 
that H is an omni-connected-spanning-subgraph. Let m be the number of distinct 
strictly positive values of 7 and set Vi = {P G P | P G EJ} for i = l,...,m. 
Note that by the definition of 7 for every P S V \ {D} there exists i G {1, . . . ,m} 
such that P £ Vi. Assume by way of contradiction that H is not an omni-connected- 
spanning-subgraph. Let k be the minimum integer such that there exists P £ Vk for 
which |i7 n P| ^ |P|opi. Since H is a, minimum connected spanning subgraph and 7 
a maxmin-edge-distribution by Proposition 1 we have \H C\ E1\ = opt\E1\. Since V 
refines £"(7) we also have \H n El\ = T^E'ev^ \^ ^ ^'1 ^^'^ \^k \ = i2E'eVk \^'\ and 
hence 

^ \HnE'\ = opt J2 
E'eVk E'eVk 

Therefore the fact that |//" n P| ^ |P|opt implies that there exists P' G Vk such that 
\H n P'l < \P'\opt. Let P' be such a set. 

Let E* bo the union of P' and all its ancestors (see Definition 17 in Section 5). 
We next show that cr{E*) = opt. Set a : E{G) ^ R so that a(e) = if e G -B* 
and a(e) =0 otherwise. Observe that a is an edge-distribution, V refines S{a) and 
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E" = E* , E" = E \ E* and a{e) = for every e G D. Now for any parent and its 
child if the child is contained E* it is cither P' or one of its ancestors. Thus the parent 
is also an ancestor of P' and hence is also in E* . Consequently, a agrees with O and 
hence by Corollary 2 we have that a is a maxmin-edge-distribution. This in turn by 
Theorem 1 implies cr{E*) = opt. 

Note that because of the strict weight inequalities, all the ancestors of P' are 
elements in one of the sets Vi, ■ ■ ■ jVk-i- Thus for any ancestor P* of P' we have 
\Hr\P*\= opt\P*\. Consequently, \HnE*\ < opt\E*\ yet this can not be since opt\E*\ 
is the minimum number of edges a connected spanning subgraph can have in E*. D 



7 Appendix: The nucleolus 

Proof. Let n, v be as stated in the theorem and H an omni-connected-spanning- 
subgraph and t the number of layers. Observe that 



and hence v is an edge-distribution. Note that by definition V refines £(y) and for any 
e & P € V that is a parent of e' € P' G V we have iy{e) > y{e') and hence v is a, 
maxmin-edge-distribution and specifically a prime-edge-distribution. 

We now show that the weight of the second best strategy of the liidcr is opt + k. 
Afterwards we show that the only ;/ is the only prime-edge-distribution for which the 
weight of the second best strategy of the hidcr is at least opt -\- k. 

Let P e "P be such that P C Li. Since opt < 1 Proposition 1 implies that there 
exists e € P \ E{H). By the definition of v we have i'(e) = re. By Proposition 3 
i^{H) — opt and hence ^{H U {e}) = opt + k. Note that since /^(e') is a multiple of 
K for every e £ E there does not exist a connected spanning subgraph H' such that 
opt < v{H') < opt + re. 

Let a be a prime-edge-distribution such that the second smallest weight of a con- 
nected spanning subgraph is opt -\- re. We shall prove by induction on i that a(e) > £re 
for every e € Lg, and every I = 1, . . . , Since the only prime-edge-distribution that 
satisfies this conditions is v this implies that a = v. 

Assume for the sake of contradiction that there exists e £ P £ Li such that 
q(c) < re. Since opt < 1 Proposition 1 implies that there exists e' £ P \ E{H). By 
Proposition .'3 wc have i^{H) = opt and hence because a(e') — a{e) < re we get ^{H U 
{e}) = opt+a{e') < opt + K. In addition as a is a prime-edge-distribution a(e') > and 
thus ^{H U {e}) > opt. Yet the assumption was that the hiders second best response 
to a is at least opt + re. 

Assume by way of induction that for ^ — 1 we have a(e) > {(. — l)re for every 
e G Lt-\. Assume for the sake of contradiction that there exists e £ P £ Li such 
that a{e) < I ■ k. By the definition of Li, there exists P' C L^_i such that P is 
a parent of P' . Consequently, there exists an omni-connected-spanning-subgraph H' , 
e! £P\ E{H') and e" G P' n E{H') such that H* = {H' \ {e"}) U {e'} is and spanning 
tree of G. Observe that a{H*) = a{H') + a(e') — a{e"). By Proposition 3, we have 
a{H') = opt and hence a{H*) = opt + a{e') — a{e"). By the induction assumption, we 
have a(e") > {£ — l)re and therefore as a{e") = a{e) < £ ■ k we get a{H*) < opt + re. 
In addition as a is a primc-cdge-distribution wc have a(e') > a{e") and therefore 
1/(11* U {e}) > opt. Yet the assumption was that the hider's second best response to a 
is at least opt + k. D 
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8 Appendix: Extreme points 

Definition 18. We say B C'P\ {D} is closed if for every P £ B all of the ancestors 
of P are also in B. Set A{B) = Ue'sbE!' ■ We say a dosed set B is minimal if there do 
not exist any dosed sets Bi,B2 CV \ {D} such that A{B) = A{Bi) U A{B2). 

Definition 19. An edge-distribution a is an oxtrcmc-cdge-distribution if and only 
if there exists a minimal closed set B such that Ei — A{B) and E2 = 0. 

Theorem 6. The extreme-edge-distributions are the extreme points of the maxmin- 
polytope. 

The proof uses similar techniques to our other proofs and is omitted. 



